[Samba] gpo not applied a boot computer

L.P.H. van Belle belle at bazuin.nl
Wed Feb 27 09:47:47 UTC 2019


Hai, 


Did you set in the GPO (computer policy) 

Under System\Logon, "Always wait for the network at computer startup and logon" = Enabled"

If its a script, also add these. 

"Configure Network Options preference extension policy processing" is "Enabled"
"Configure Logon Script Delay" = Enabled and set to 0

And, after setting the GPO, reboot 2 x ! or login as Domain\Administrator and run gupdate /force
Then reboot. (1x) 


Greetz, 

Louis


> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> David Jehin via samba
> Verzonden: woensdag 27 februari 2019 10:41
> Aan: Sérgio Basto
> CC: samba at lists.samba.org
> Onderwerp: Re: [Samba] gpo not applied a boot computer
> 
> thank you for your reply. bind rights are correct.
> >
> > but the problem does not come from the dns, they are well updated.
> >
> > gpo are not applied only to the startup of the computer. 
> After a user logs
> >> in, the gpupdate / force command is applied correctly.
> >
> > the samba server side logs are:
> >
> >
> 
> > [2019/02/26 12:20:06.751340,  2] 
> ../source3/smbd/service.c:1120(close_cnum)
> >>
> >> S server Update(krb5)(1) Update failed:  Miscellaneous failure (see
> >>> text): Decrypt integrity check failed
> >>
> >> [2019/02/25 10:21:11.914286,  1]
> >>> 
> ../auth/gensec/spnego.c:1218(gensec_spnego_server_negTokenInit_step)
> >>
> >>   gensec_spnego_server_negTokenInit_step: gssapi_krb5: parsing
> >>> NEG_TOKEN_INIT content failed (next[(null)]): 
> NT_STATUS_LOGON_FAILURE
> >>
> >>
> 
> > the logs on windows 10 are: error id : 1130 and  1058
> >
> >
> thank
> 
> >
> >
> > In my notes if you use --dns-backend=BIND9_DLZ
> >
> > # To start named (bind)
> > chgrp named /var/lib/samba/private
> > chmod g+rx /var/lib/samba/private
> >
> > Samba 4.8
> > ls -lai /var/lib/samba/bind-dns/dns/sam.ldb.d/
> > (everything 660 e root:named)
> >
> > ll /var/lib/samba/bind-dns/dns/
> > -rw-rw---- 1 root named 3014656 Nov 15 16:36 sam.ldb
> > drwxrwx--- 2 root named     281 Nov 15 16:36 sam.ldb.d
> >
> > chmod g+w /var/lib/samba/bind-dns
> > chgrp named /var/lib/samba/private/dns.keytab
> > chmod g+r  /var/lib/samba/private/dns.keytab
> >
> >
> >
> > --
> > Sérgio M. B.
> >
> >
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
> 
> 




More information about the samba mailing list